Forminator Forms CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Forminator Forms CVE published 2026-09-20

CVE-2026-87068

CVE-2026-87068 debrief based on CVE Program and NVD records. The Forminator Forms WordPress plugin before 1.57.2.1 does not apply role validation when a registration form is nested inside an imported quiz, allowing a user with quiz import permissions to publish a live form granting any role, including administrator. This vulnerability affects WordPress administrators and users with Forminator Forms plugin [truncated]